@tt-a1i/hive 2.1.11 → 2.1.13

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable user-facing changes will be documented in this file.
 
+## 2.1.12 - 2026-06-25
+
+Default port and Pi agent support.
+
+- Changes Hive's default local runtime port from `3000` to `9483`, reducing
+  collisions with common local development services while keeping `--port 0`
+  available for OS-assigned ports.
+- Updates the local Supervisor MCP adapter and Vite dev proxy to follow the
+  same default port.
+- Adds Pi as a built-in agent preset with `pi --approve`, including workflow
+  CLI policy support, prompt-readiness handling, and migration support for
+  existing Hive databases.
+
 ## 2.1.11 - 2026-06-25
 
 Supervisor MCP bridge and terminal input polish.

package/README.md

@@ -8,7 +8,7 @@
   <img src="./assets/hive-hero.png" alt="Hive local-first multi-agent collaboration workspace hero image" />
 </p>
 
-**Run Claude Code, Codex, Gemini, OpenCode, Qwen, and other CLI agents as a visible local team.** Hive gives you one browser workbench where an
+**Run Claude Code, Codex, Gemini, OpenCode, Qwen, Pi, and other CLI agents as a visible local team.** Hive gives you one browser workbench where an
 Orchestrator plans and delegates while workers implement, review, test,
 research, and report back — all as real PTY processes on your laptop.
 
@@ -48,7 +48,7 @@ awkward:
 
 Hive adds the coordination layer without replacing the CLIs. The Orchestrator
 is a real `agy` / `claude` / `codex` / `opencode` / `gemini` / `hermes` /
-`qwen` process, not a scripted PM. Workers are real CLI agents too. Hive
+`qwen` / `pi` process, not a scripted PM. Workers are real CLI agents too. Hive
 injects a small `team` command into their shells, so they can dispatch,
 report, and keep a shared markdown task graph at `<workspace>/.hive/tasks.md`.
 
@@ -117,8 +117,8 @@ Those warnings usually come from npm's install-script review plus native
 binary setup for `node-pty`, `better-sqlite3`, and `esbuild`; they do not mean
 Hive failed to install. The troubleshooting section below breaks them down.
 
-Open the printed local URL, usually `http://127.0.0.1:3000/`. Use
-`hive --port 4010` when you need a specific local port.
+Open the printed local URL, usually `http://127.0.0.1:9483/`. Use
+`hive --port 0` when you want Hive to ask the OS for any free local port.
 
 To upgrade in place:
 
@@ -133,7 +133,7 @@ npm copy will shadow your existing install.
 
 Install Hive as an app (optional):
 
-Open `http://127.0.0.1:3000/` in Chrome, Edge, or Brave and click the install
+Open `http://127.0.0.1:9483/` in Chrome, Edge, or Brave and click the install
 icon at the right edge of the browser's omnibox. The PWA launches in its own
 dock-anchored window without browser chrome and shows **Add Workspace** /
 **Try Demo** shortcuts from the dock right-click menu. Firefox and Safari
@@ -143,8 +143,8 @@ only appears in Chromium-based browsers.
 The Hive daemon must still be running for the PWA to do anything; if the
 runtime isn't reachable when you launch the app, you'll see a "Hive runtime
 is not running" page that auto-reloads once `hive` is back on `127.0.0.1`.
-The PWA install scope is keyed by origin, so `hive --port 4011` installs as
-a separate app from `hive --port 3000`. To uninstall, visit `chrome://apps`,
+The PWA install scope is keyed by origin, so `hive --port 9484` installs as
+a separate app from `hive --port 9483`. To uninstall, visit `chrome://apps`,
 right-click the Hive tile, and choose **Remove from Chrome…**.
 
 Hive asks the browser to confirm before closing the tab or PWA window so an
@@ -220,6 +220,7 @@ Three details matter:
 | Gemini | `gemini` | `--yolo` | `--resume <session_id>` |
 | Hermes | `hermes` | `--yolo` | `--resume <session_id>` |
 | Qwen Code | `qwen` | `--approval-mode yolo` | `--resume <session_id>` |
+| Pi | `pi` | `--approve` | Session id capture not wired yet |
 | Cursor CLI | `cursor` | `--force` | Session id capture not wired yet |
 | Grok Build | `grok` | `--always-approve` | Session id capture not wired yet |
 | Custom | Any executable | User configured | User configured |
@@ -232,7 +233,7 @@ same shell environment you use to start Hive.
 | Tier | CLIs | Commitment |
 | --- | --- | --- |
 | Tier 1 | Claude Code, Codex | Minimum compatibility report in CI (`pnpm compat:cli:report`): Node 22, `node-pty`, `better-sqlite3`, and CLI version detection when installed. |
-| Tier 2 | Gemini, OpenCode, Qwen Code, Hermes, Cursor CLI, Grok Build, Antigravity CLI | Built-in presets and manual smoke coverage; upstream CLI changes may require user reports before Hive catches up. |
+| Tier 2 | Gemini, OpenCode, Qwen Code, Hermes, Pi, Cursor CLI, Grok Build, Antigravity CLI | Built-in presets and manual smoke coverage; upstream CLI changes may require user reports before Hive catches up. |
 | Custom | Any executable | User-maintained command, args, and auth behavior. Hive preserves the PTY/session wrapper but cannot promise CLI-specific compatibility. |
 
 ## What Hive Provides
@@ -250,7 +251,8 @@ same shell environment you use to start Hive.
 - Workflow CLI policy: choose the default CLI for workflow-created agents and
   restrict which CLIs workflow scripts may launch.
 - `.hive/tasks.md` editor with external-file conflict handling.
-- Background PTY preservation and best-effort native session resume.
+- Background PTY preservation and best-effort native session resume for presets with
+  configured session capture.
 - A What's New dialog after upgrades with curated release highlights.
 - Local SQLite metadata under `%APPDATA%\hive` on Windows and `~/.config/hive`
   on macOS / Linux by default, or `$HIVE_DATA_DIR` when set.
@@ -404,7 +406,7 @@ pnpm install
 pnpm dev
 ```
 
-Development mode runs the runtime on `127.0.0.1:4010`; Vite runs on
+Development mode runs the runtime on `127.0.0.1:9483`; Vite runs on
 `127.0.0.1:5180` and proxies API and WebSocket traffic to the runtime.
 
 Useful checks:
@@ -419,7 +421,7 @@ Production-style local run:
 
 ```bash
 pnpm build
-node dist/src/cli/hive.js --port 4010
+node dist/src/cli/hive.js --port 9483
 ```
 
 The production server serves the built web UI directly. No Vite server is

package/README.zh.md

@@ -8,7 +8,7 @@
   <img src="./assets/hive-hero.png" alt="Hive 本机多 agent 协作工作台" />
 </p>
 
-**Hive 是浏览器里的 Agent 协作工作台——一群 Agent 在你本机各自开工，一个当 Orchestrator 派活、归总进展，其余各司其职。** Orchestrator 本身就是一个真实的 `agy` / `claude` / `codex` / `opencode` / `gemini` / `hermes` / `qwen` 进程——不是你、也不是脚本——它派单的 Worker 同样是真 CLI agent。所有 agent 都是本机真实的 PTY 进程，通过 Hive 注入到 shell 里的小型 `team` 协议互相通信，共享 `<workspace>/.hive/tasks.md` 这份 markdown 任务图。
+**Hive 是浏览器里的 Agent 协作工作台——一群 Agent 在你本机各自开工，一个当 Orchestrator 派活、归总进展，其余各司其职。** Orchestrator 本身就是一个真实的 `agy` / `claude` / `codex` / `opencode` / `gemini` / `hermes` / `qwen` / `pi` 进程——不是你、也不是脚本——它派单的 Worker 同样是真 CLI agent。所有 agent 都是本机真实的 PTY 进程，通过 Hive 注入到 shell 里的小型 `team` 协议互相通信，共享 `<workspace>/.hive/tasks.md` 这份 markdown 任务图。
 
 写代码、做调研、起草文档、做翻译——凡是能拆给一群人协作的脑力活，都可以让一群 Agent 合伙干。
 
@@ -94,7 +94,7 @@ npm install -g @tt-a1i/hive --registry=https://registry.npmmirror.com
 
 安装时如果看到 `npm warn allow-scripts` 或 `prebuild-install@7.1.3 deprecated`，先看最后是否显示 `added ... packages`。这些 warning 多数来自 npm 对安装脚本的安全审查，以及 `node-pty` / `better-sqlite3` / `esbuild` 这类原生依赖的二进制安装链路；不代表 Hive 启动失败。下面的故障排查里有逐项解释。
 
-打开终端打印出来的本机地址，通常是 `http://127.0.0.1:3000/`。如果你想指定端口，可以用 `hive --port 4010`。
+打开终端打印出来的本机地址，通常是 `http://127.0.0.1:9483/`。如果你想让系统自动分配一个空闲端口，可以用 `hive --port 0`。
 
 升级到最新版本：
 
@@ -106,9 +106,9 @@ hive update
 
 把 Hive 装为应用（可选）：
 
-在 Chrome / Edge / Brave 里打开 `http://127.0.0.1:3000/`，点浏览器地址栏右侧的安装图标即可。装好后 Hive 会以独立窗口启动、有自己的 dock 图标，且 dock 右键菜单上会显示 **添加 Workspace** / **试用演示** 两个快捷入口。Firefox 和 Safari 暂未实现 PWA install-prompt 协议，浏览器地址栏的安装图标只在 Chromium 系浏览器里出现。
+在 Chrome / Edge / Brave 里打开 `http://127.0.0.1:9483/`，点浏览器地址栏右侧的安装图标即可。装好后 Hive 会以独立窗口启动、有自己的 dock 图标，且 dock 右键菜单上会显示 **添加 Workspace** / **试用演示** 两个快捷入口。Firefox 和 Safari 暂未实现 PWA install-prompt 协议，浏览器地址栏的安装图标只在 Chromium 系浏览器里出现。
 
-PWA 只是 UI 壳，Hive 后端仍需要在终端里跑着。如果启动 PWA 时后端没起，会看到 “Hive 后端未启动” 页面，等你跑起 `hive` 后会自动刷新。PWA 的 install scope 按 origin（含端口）划分，所以 `hive --port 4011` 跟 `hive --port 3000` 在浏览器看来是两个独立应用。卸载方法：浏览器地址栏访问 `chrome://apps`，右键 Hive 图标，选 **从 Chrome 中移除…**。
+PWA 只是 UI 壳，Hive 后端仍需要在终端里跑着。如果启动 PWA 时后端没起，会看到 “Hive 后端未启动” 页面，等你跑起 `hive` 后会自动刷新。PWA 的 install scope 按 origin（含端口）划分，所以 `hive --port 9484` 跟 `hive --port 9483` 在浏览器看来是两个独立应用。卸载方法：浏览器地址栏访问 `chrome://apps`，右键 Hive 图标，选 **从 Chrome 中移除…**。
 
 关闭 PWA 窗口或 tab 时 Hive 会主动请求浏览器弹原生确认对话框，避免关闭快捷键（macOS 上是 Cmd+W、Windows / Linux 上是 Ctrl+W）误关丢失会话。但现代浏览器要求你跟页面"交互过"（点击 / 滚动 / 输入）才会真的弹这个对话框——刚打开 PWA 立刻按关闭快捷键仍会直接关闭，这是浏览器策略，不是 Hive 的 bug。
 
@@ -165,6 +165,7 @@ Workspace 任务图：
 | Gemini | `gemini` | `--yolo` | `--resume <session_id>` |
 | Hermes | `hermes` | `--yolo` | `--resume <session_id>` |
 | Qwen Code | `qwen` | `--approval-mode yolo` | `--resume <session_id>` |
+| Pi | `pi` | `--approve` | 暂未自动捕获 session id |
 | Cursor CLI | `cursor` | `--force` | 暂未自动捕获 session id |
 | Grok Build | `grok` | `--always-approve` | 暂未自动捕获 session id |
 | 自定义 | 任意可执行文件 | 自己配 | 自己配 |
@@ -176,7 +177,7 @@ Hive 不替你安装这些 CLI。请在启动 Hive 的同一个 shell 环境里
 | 分级 | CLI | 承诺 |
 | --- | --- | --- |
 | Tier 1 | Claude Code、Codex | CI 生成最小兼容报告（`pnpm compat:cli:report`）：检查 Node 22、`node-pty`、`better-sqlite3`，并在本机已安装 CLI 时记录版本。 |
-| Tier 2 | Gemini、OpenCode、Qwen Code、Hermes、Cursor CLI、Grok Build、Antigravity CLI | 内置 preset + 手动 smoke 覆盖；上游 CLI 行为变化可能需要用户报告后再跟进。 |
+| Tier 2 | Gemini、OpenCode、Qwen Code、Hermes、Pi、Cursor CLI、Grok Build、Antigravity CLI | 内置 preset + 手动 smoke 覆盖；上游 CLI 行为变化可能需要用户报告后再跟进。 |
 | Custom | 任意可执行命令 | 用户自己维护命令、参数和登录状态；Hive 只保证 PTY/session 包装，不承诺 CLI 专属兼容性。 |
 
 ## Hive 提供什么
@@ -188,7 +189,7 @@ Hive 不替你安装这些 CLI。请在启动 Hive 的同一个 shell 环境里
 - Workflows（实验性，默认关闭）：Orchestrator 可以运行多阶段、多 agent 的 workflow，Hive 在 Workflows 面板里展示运行、日志、结果、定时任务和停止控制。
 - Workflow CLI 策略：为 workflow 创建的 agent 选择默认 CLI，并限制允许使用的 CLI，避免脚本误启未配置的 agent。
 - `.hive/tasks.md` 编辑器，带外部文件冲突处理。
-- PTY 后台保留 + 尽力使用各 CLI 原生 session 恢复。
+- PTY 后台保留；对已配置 session capture 的预设，尽力使用对应 CLI 的原生 session 恢复。
 - 升级后的 What's New 弹窗，用简短 release highlights 告诉你新版改了什么。
 - 元数据存在本机 SQLite，Windows 默认在 `%APPDATA%\hive`，macOS / Linux 默认在 `~/.config/hive`，也可以通过 `$HIVE_DATA_DIR` 指定。
 
@@ -294,7 +295,7 @@ pnpm install
 pnpm dev
 ```
 
-开发模式下 runtime 跑在 `127.0.0.1:4010`，Vite 跑在 `127.0.0.1:5180`，把 API 和 WebSocket 代理到 runtime。
+开发模式下 runtime 跑在 `127.0.0.1:9483`，Vite 跑在 `127.0.0.1:5180`，把 API 和 WebSocket 代理到 runtime。
 
 常用命令：
 
@@ -308,7 +309,7 @@ pnpm test
 
 ```bash
 pnpm build
-node dist/src/cli/hive.js --port 4010
+node dist/src/cli/hive.js --port 9483
 ```
 
 Production 模式下 runtime 直接服务构建好的 web UI，不需要单独的 Vite。

package/dist/src/cli/hive-defaults.d.ts

@@ -0,0 +1 @@
+export declare const DEFAULT_HIVE_PORT = 9483;

package/dist/src/cli/hive-defaults.js

@@ -0,0 +1 @@
+export const DEFAULT_HIVE_PORT = 9483;

package/dist/src/cli/hive-mcp.js

@@ -4,6 +4,7 @@ import { fileURLToPath } from 'node:url';
 import { HIVE_SUPERVISOR_TOKEN_HEADER } from '../server/external-goal-auth.js';
 import { readPackageVersion } from '../server/package-version.js';
 import { sameFilesystemPath } from '../server/path-canonicalization.js';
+import { DEFAULT_HIVE_PORT } from './hive-defaults.js';
 export const HIVE_MCP_TOOL_NAMES = [
     'hive.list_workspaces',
     'hive.inspect_workspace',
@@ -80,7 +81,7 @@ const parseBaseUrl = (argv, env) => {
         return env.HIVE_MCP_BASE_URL.replace(/\/$/u, '');
     if (env.HIVE_PORT)
         return `http://127.0.0.1:${env.HIVE_PORT}`;
-    return 'http://127.0.0.1:3000';
+    return `http://127.0.0.1:${DEFAULT_HIVE_PORT}`;
 };
 const readHttpErrorDetail = async (response) => {
     const text = await response.text().catch(() => '');

package/dist/src/cli/hive.d.ts

@@ -2,6 +2,7 @@
 import { type RemoteTunnel, type RemoteTunnelDeps } from '../server/remote-tunnel.js';
 import { type RuntimeStore } from '../server/runtime-store.js';
 import { type VersionService } from '../server/version-service.js';
+import { DEFAULT_HIVE_PORT } from './hive-defaults.js';
 interface RunHiveCommandResult {
     port: number;
     close: () => Promise<void>;
@@ -40,6 +41,7 @@ type RunHiveCommandOptions = {
  * registration is mostly about giving SQLite a chance to checkpoint.
  */
 export declare const SHUTDOWN_SIGNALS: readonly ["SIGINT", "SIGTERM", "SIGHUP", "SIGBREAK"];
+export { DEFAULT_HIVE_PORT };
 export declare const HIVE_USAGE: string;
 export declare const handleHiveInfoCommand: (argv: string[]) => boolean;
 /**

package/dist/src/cli/hive.js

@@ -13,6 +13,7 @@ import { createRemoteConfigSource } from '../server/remote-config-keys.js';
 import { createRemoteTunnel, } from '../server/remote-tunnel.js';
 import { createRuntimeStore } from '../server/runtime-store.js';
 import { createVersionService } from '../server/version-service.js';
+import { DEFAULT_HIVE_PORT } from './hive-defaults.js';
 import { runHiveMcpCommand } from './hive-mcp.js';
 import { runHiveRemoteCommand } from './hive-remote.js';
 import { runHiveUpdateCommand } from './hive-update.js';
@@ -38,13 +39,14 @@ import { runHiveUpdateCommand } from './hive-update.js';
  * registration is mostly about giving SQLite a chance to checkpoint.
  */
 export const SHUTDOWN_SIGNALS = ['SIGINT', 'SIGTERM', 'SIGHUP', 'SIGBREAK'];
+export { DEFAULT_HIVE_PORT };
 export const HIVE_USAGE = [
     'Usage:',
     '  hive [--port <port>] [--no-open]',
     '  hive update',
     '',
     'Options:',
-    '  --port <port>   Bind the local runtime to a specific port (default: 3000).',
+    `  --port <port>   Bind the local runtime to a specific port (default: ${DEFAULT_HIVE_PORT}).`,
     '  --no-open       Do not auto-open the browser after start.',
     '  -h, --help      Print this help.',
     '  -v, --version   Print the installed Hive version.',
@@ -89,7 +91,7 @@ const parsePort = (argv) => {
         parsedPort = port;
         index += 1;
     }
-    return parsedPort ?? 3000;
+    return parsedPort ?? DEFAULT_HIVE_PORT;
 };
 /**
  * Resolve the directory where Hive persists its SQLite DB and supporting

package/dist/src/server/agent-run-starter.js

@@ -2,9 +2,12 @@ import { classifyCompletedRunStatus, shouldClearResumedSessionOnExit, } from './
 import { buildAgentRunBootstrap, startAgentRunCapture } from './agent-run-bootstrap.js';
 import { handleAgentRunExit } from './agent-run-exit-handler.js';
 import { buildAgentStartupInstructions, buildWorkflowAgentStartupInstructions, } from './agent-startup-instructions.js';
+import { ensureClaudeDirectoryTrusted } from './claude-trust-store.js';
+import { ensureCodexDirectoryTrusted } from './codex-trust-store.js';
 import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { createPostStartInputWriter, isInteractiveAgentCommand } from './post-start-input-writer.js';
 import { isResumeLaunchConfig } from './preset-launch-support.js';
+import { normalizeExecutableToken } from './startup-command-parser.js';
 import { buildMemoryDigestSafely, logMemoryDigestInjection, rollbackMemoryDigestInjection, } from './team-memory-injection.js';
 export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getFlags, memoryInjection, }) => async (workspace, agentId, config, hivePort) => {
     if (!agentManager)
@@ -27,6 +30,17 @@ export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, sto
         tokenRegistry,
         workspace,
     };
+    // Pre-trust the workspace so a CLI's first-run "Do you trust this folder?"
+    // prompt never blocks startup-message injection. Each helper is a no-op
+    // (and never throws) when the trust flag is already set; both leave other
+    // CLIs untouched.
+    const commandBrand = normalizeExecutableToken(startConfig.command);
+    if (commandBrand === 'claude') {
+        ensureClaudeDirectoryTrusted(workspace.path);
+    }
+    else if (commandBrand === 'codex') {
+        ensureCodexDirectoryTrusted(workspace.path);
+    }
     const startInput = {
         agentId,
         command: startConfig.command,

package/dist/src/server/agent-stdin-dispatcher.js

@@ -2,7 +2,7 @@ import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { escapeHiveEnvelopeAttribute, escapeHiveEnvelopeText } from './hive-envelope-escape.js';
 import { buildOrchestratorReminderTail, buildWorkerReminderTail } from './hive-team-guidance.js';
 import { PtyInactiveError } from './http-errors.js';
-import { createPostStartInputWriter } from './post-start-input-writer.js';
+import { createImmediateInteractiveInputWriter } from './post-start-input-writer.js';
 import { buildDispatchMemoryDigestSafely, logMemoryDigestInjection, rollbackMemoryDigestInjection, } from './team-memory-injection.js';
 export const buildOrchestratorReportPayload = (workerName, text, artifacts, flags = FEATURE_FLAGS_ALL_OFF, dispatchId) => {
     const dispatchAttribute = dispatchId
@@ -108,7 +108,7 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
             try {
                 const config = getLaunchConfig(workspaceId, agentId);
                 if (agentManager && config) {
-                    return (createPostStartInputWriter(agentManager, config.interactiveCommand ?? config.command)(run.runId, text).catch((error) => {
+                    return (createImmediateInteractiveInputWriter(agentManager, config.interactiveCommand ?? config.command)(run.runId, text).catch((error) => {
                         throw new PtyInactiveError(error instanceof Error ? error.message : String(error));
                     }) ?? Promise.resolve());
                 }

package/dist/src/server/claude-trust-store.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Ensure ~/.claude.json marks `cwd` as a trusted folder so claude does not show
+ * its first-run trust modal there. Merges into the existing config in place:
+ * only the target project entry's trust flags are touched; every other project
+ * and every top-level field is preserved. Writes atomically (temp + rename) so
+ * a crash mid-write cannot truncate this large shared file.
+ *
+ * Never throws — a failure here just degrades to claude showing its modal (the
+ * pre-existing behaviour), so it must not block member startup.
+ *
+ * @param cwd      Absolute workspace path claude will launch in (the project key).
+ * @param homeDir  Home directory override, for tests. Defaults to os.homedir().
+ */
+export declare const ensureClaudeDirectoryTrusted: (cwd: string, homeDir?: string) => void;

package/dist/src/server/claude-trust-store.js

@@ -0,0 +1,67 @@
+import { readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+// Claude Code records per-directory trust under projects[<absolute cwd>] in
+// ~/.claude.json. When that entry is missing (or hasTrustDialogAccepted is
+// false), claude shows a blocking "Do you trust this folder?" modal on first
+// launch in that cwd. Pre-seeding the flag before we spawn claude makes the
+// modal never appear, which also unblocks Hive's startup-message injection
+// (the post-start writer's first-run setup guard would otherwise stall on the
+// modal until the hard-timeout fallback fires into a still-open dialog).
+const getClaudeConfigPath = (homeDir) => join(homeDir, '.claude.json');
+const readClaudeConfig = (configPath) => {
+    try {
+        const raw = readFileSync(configPath, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
+            return parsed;
+        }
+    }
+    catch {
+        // Missing or corrupt file: start from an empty config rather than throwing.
+        // A malformed ~/.claude.json is claude's to repair; we only add our key.
+    }
+    return {};
+};
+/**
+ * Ensure ~/.claude.json marks `cwd` as a trusted folder so claude does not show
+ * its first-run trust modal there. Merges into the existing config in place:
+ * only the target project entry's trust flags are touched; every other project
+ * and every top-level field is preserved. Writes atomically (temp + rename) so
+ * a crash mid-write cannot truncate this large shared file.
+ *
+ * Never throws — a failure here just degrades to claude showing its modal (the
+ * pre-existing behaviour), so it must not block member startup.
+ *
+ * @param cwd      Absolute workspace path claude will launch in (the project key).
+ * @param homeDir  Home directory override, for tests. Defaults to os.homedir().
+ */
+export const ensureClaudeDirectoryTrusted = (cwd, homeDir = homedir()) => {
+    try {
+        const configPath = getClaudeConfigPath(homeDir);
+        const config = readClaudeConfig(configPath);
+        const projects = config.projects ?? {};
+        const existing = projects[cwd] ?? {};
+        if (existing.hasTrustDialogAccepted === true &&
+            Number(existing.projectOnboardingSeenCount) >= 1) {
+            return;
+        }
+        const nextConfig = {
+            ...config,
+            projects: {
+                ...projects,
+                [cwd]: {
+                    ...existing,
+                    hasTrustDialogAccepted: true,
+                    projectOnboardingSeenCount: Math.max(1, Number(existing.projectOnboardingSeenCount) || 0),
+                },
+            },
+        };
+        const tempPath = `${configPath}.hive-${process.pid}.tmp`;
+        writeFileSync(tempPath, `${JSON.stringify(nextConfig, null, 2)}\n`, 'utf8');
+        renameSync(tempPath, configPath);
+    }
+    catch (error) {
+        console.error('[hive] swallowed:claudeTrustStore.ensureTrusted', error);
+    }
+};

package/dist/src/server/codex-trust-store.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Ensure ~/.codex/config.toml trusts `cwd` so codex does not show its first-run
+ * directory-trust prompt there. Appends a `[projects."<cwd>"]` table with
+ * `trust_level = "trusted"` only when that section is absent; existing content
+ * (every other project table and all top-level settings) is preserved
+ * verbatim. Writes atomically (temp + rename).
+ *
+ * Never throws — a failure degrades to codex showing its prompt (the
+ * pre-existing behaviour), so it must not block member startup.
+ *
+ * @param cwd      Absolute workspace path codex will launch in.
+ * @param homeDir  Home directory override, for tests. Defaults to os.homedir().
+ */
+export declare const ensureCodexDirectoryTrusted: (cwd: string, homeDir?: string) => void;

package/dist/src/server/codex-trust-store.js

@@ -0,0 +1,72 @@
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+// Codex records per-directory trust in ~/.codex/config.toml as a table:
+//
+//   [projects."/abs/path"]
+//   trust_level = "trusted"
+//
+// Without it, codex shows a blocking "Do you trust the contents of this
+// directory?" prompt on first launch in that cwd. Like the claude case, this
+// also stalls Hive's startup-message injection (the post-start writer's
+// first-run setup guard matches "Do you trust" and waits out the hard timeout
+// into a still-open dialog). Pre-seeding the table before we spawn codex makes
+// the prompt never appear.
+//
+// --dangerously-bypass-approvals-and-sandbox does NOT cover this: it skips
+// command approvals / sandboxing, not the pre-session directory trust gate.
+const getCodexDir = (homeDir) => join(homeDir, '.codex');
+const getCodexConfigPath = (homeDir) => join(getCodexDir(homeDir), 'config.toml');
+// TOML bare-string keys escape backslash and double-quote (see TOML basic
+// strings). POSIX/macOS workspace paths almost never contain these, but quote
+// defensively so a stray char cannot corrupt the file.
+const toTomlQuotedKey = (value) => `"${value.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
+// Match the exact section header for this cwd, e.g. [projects."/abs/path"],
+// tolerating optional whitespace inside the brackets. Anchored per-line.
+const hasProjectSection = (toml, cwd) => {
+    const header = `[projects.${toTomlQuotedKey(cwd)}]`;
+    return toml.split('\n').some((line) => line.trim() === header);
+};
+const readConfig = (configPath) => {
+    try {
+        return readFileSync(configPath, 'utf8');
+    }
+    catch {
+        // Missing (or unreadable) config: start from empty and let codex own the
+        // rest of the file. We only ever append our own project table.
+        return '';
+    }
+};
+/**
+ * Ensure ~/.codex/config.toml trusts `cwd` so codex does not show its first-run
+ * directory-trust prompt there. Appends a `[projects."<cwd>"]` table with
+ * `trust_level = "trusted"` only when that section is absent; existing content
+ * (every other project table and all top-level settings) is preserved
+ * verbatim. Writes atomically (temp + rename).
+ *
+ * Never throws — a failure degrades to codex showing its prompt (the
+ * pre-existing behaviour), so it must not block member startup.
+ *
+ * @param cwd      Absolute workspace path codex will launch in.
+ * @param homeDir  Home directory override, for tests. Defaults to os.homedir().
+ */
+export const ensureCodexDirectoryTrusted = (cwd, homeDir = homedir()) => {
+    try {
+        const configPath = getCodexConfigPath(homeDir);
+        const existing = readConfig(configPath);
+        if (hasProjectSection(existing, cwd))
+            return;
+        const section = `[projects.${toTomlQuotedKey(cwd)}]\ntrust_level = "trusted"\n`;
+        // Separate from prior content with a blank line, matching codex's own
+        // formatting. An empty/period-terminated file needs no leading newline.
+        const separator = existing.length === 0 ? '' : existing.endsWith('\n') ? '\n' : '\n\n';
+        const next = `${existing}${separator}${section}`;
+        mkdirSync(getCodexDir(homeDir), { recursive: true });
+        const tempPath = `${configPath}.hive-${process.pid}.tmp`;
+        writeFileSync(tempPath, next, 'utf8');
+        renameSync(tempPath, configPath);
+    }
+    catch (error) {
+        console.error('[hive] swallowed:codexTrustStore.ensureTrusted', error);
+    }
+};

package/dist/src/server/command-preset-defaults.d.ts

@@ -1,5 +1,5 @@
 import type { SessionIdCaptureConfig } from './session-capture.js';
-export declare const BUILTIN_COMMAND_PRESET_IDS: readonly ["claude", "codex", "opencode", "gemini", "hermes", "qwen", "agy", "cursor", "grok"];
+export declare const BUILTIN_COMMAND_PRESET_IDS: readonly ["claude", "codex", "opencode", "gemini", "hermes", "qwen", "pi", "agy", "cursor", "grok"];
 export type BuiltinCommandPresetId = (typeof BUILTIN_COMMAND_PRESET_IDS)[number];
 export interface BuiltinCommandPresetDefaults {
     id: BuiltinCommandPresetId;

package/dist/src/server/command-preset-defaults.js

@@ -6,6 +6,7 @@ export const BUILTIN_COMMAND_PRESET_IDS = [
     'gemini',
     'hermes',
     'qwen',
+    'pi',
     'agy',
     'cursor',
     'grok',
@@ -15,6 +16,7 @@ const OPENCODE_DEFAULT_YOLO_ARGS = [];
 const GEMINI_DEFAULT_YOLO_ARGS = ['--yolo'];
 const HERMES_DEFAULT_YOLO_ARGS = ['--yolo'];
 const QWEN_DEFAULT_YOLO_ARGS = ['--approval-mode', 'yolo'];
+const PI_DEFAULT_YOLO_ARGS = ['--approve'];
 const AGY_DEFAULT_YOLO_ARGS = ['--dangerously-skip-permissions'];
 const CURSOR_DEFAULT_YOLO_ARGS = ['--force'];
 const GROK_DEFAULT_YOLO_ARGS = ['--always-approve'];
@@ -85,6 +87,14 @@ export const BUILTIN_COMMAND_PRESETS = [
         },
         yoloArgsTemplate: QWEN_DEFAULT_YOLO_ARGS,
     },
+    {
+        command: 'pi',
+        displayName: 'Pi',
+        id: 'pi',
+        resumeArgsTemplate: null,
+        sessionIdCapture: null,
+        yoloArgsTemplate: PI_DEFAULT_YOLO_ARGS,
+    },
     {
         command: 'agy',
         displayName: 'Antigravity CLI',

package/dist/src/server/post-start-input-writer.d.ts

@@ -4,4 +4,5 @@ export declare const isInteractiveAgentCommand: (command: string) => boolean;
 export declare const hasFirstRunSetupPrompt: (output: string) => boolean;
 export declare const hasInteractivePromptReady: (output: string, command?: string) => boolean;
 export declare const hasBracketedPasteAcknowledgement: (output: string, baselineLength: number) => boolean;
+export declare const createImmediateInteractiveInputWriter: (agentManager: AgentManager, command: string) => ((runId: string, text: string) => Promise<void>);
 export declare const createPostStartInputWriter: (agentManager: AgentManager, command: string) => ((runId: string, text: string) => Promise<void>);